moonsabc123/dreamer_cms

GitHub

github.com

Unavailable

This project is no longer available (or publicly accessible) from GitHub

Releases0

dreamer_cms

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-48017 ↗	Nov 18, 2023Saturday, 18 November 2023, 02:15	8.8 HIGH	—
Dreamer_cms 4.1.3 is vulnerable to Cross Site Request Forgery (CSRF) via Add permissions to CSRF in Permission Management.
CVE-2023-48020 ↗	Nov 14, 2023Tuesday, 14 November 2023, 15:15	8.8 HIGH	—
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/changeStatus.
CVE-2023-48021 ↗	Nov 14, 2023Tuesday, 14 November 2023, 15:15	8.8 HIGH	—
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/update.
CVE-2023-45901 ↗	Oct 17, 2023Tuesday, 17 October 2023, 14:15	8.8 HIGH	—
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin\/category\/add.
CVE-2023-45902 ↗	Oct 17, 2023Tuesday, 17 October 2023, 14:15	8.8 HIGH	—
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/attachment/delete.
CVE-2023-45903 ↗	Oct 17, 2023Tuesday, 17 October 2023, 14:15	8.8 HIGH	—
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/label/delete.
CVE-2023-45904 ↗	Oct 17, 2023Tuesday, 17 October 2023, 14:15	8.8 HIGH	—
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /variable/update.
CVE-2023-45905 ↗	Oct 17, 2023Tuesday, 17 October 2023, 14:15	8.8 HIGH	—
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/add.
CVE-2023-45906 ↗	Oct 17, 2023Tuesday, 17 October 2023, 14:15	8.8 HIGH	—
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/user/add.
CVE-2023-45907 ↗	Oct 17, 2023Tuesday, 17 October 2023, 14:15	8.8 HIGH	—
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/delete.